This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft File: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft (raw, json) Hash identifier: d9l2RULrO/fC3A18YgFVCQbvHs9wUzI3mCL1XcFxMoU= Subject key identifier: A4:1C:57:A0:93:FF:77:64:DB:F3:F1:D3:47:6B:F8:0C:F6:EC:E5:62 Authority key identifier: 30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA Certificate issuer: /CN=307a4415bad40b643e10bec4d282cd3072ba56da Certificate serial: 019AF12EB4E3272226187C056052352466F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl (hash: H1c5IkTpKdy7YIMyNT5mKevUM3NJBWQ6gep0QJAWogQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b4:e3:27:22:26:18:7c:05:60:52:35:24:66:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307a4415bad40b643e10bec4d282cd3072ba56da Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=a41c57a093ff7764dbf3f1d3476bf80cf6ece562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:53:bf:91:2f:d0:2b:3a:45:c4:73:bb:79: 59:47:a3:31:85:86:12:08:20:f1:6f:3d:06:fe:3d: d0:ae:ea:d9:01:a6:61:08:84:e3:4c:94:7e:88:10: 62:5d:3c:6b:43:a4:d4:96:c6:d2:ce:1b:05:b6:e1: 28:4f:0e:92:8c:f8:d8:39:5b:bf:0f:ed:ec:87:d6: e2:b0:d6:b1:99:04:74:01:c1:e3:46:c0:0f:56:58: bf:07:1c:61:71:3d:aa:a0:39:16:d7:85:79:6f:11: bf:20:09:88:88:97:ab:b6:fa:9b:0c:09:21:82:c6: 49:ea:5b:80:74:92:7a:d5:0f:57:f3:67:ca:f0:9e: 03:dc:e6:b1:53:8e:d4:86:7d:59:b8:bf:2f:fd:fe: f2:41:48:df:56:40:ed:20:28:23:f3:60:cc:72:28: 23:4f:56:5b:1f:f5:3d:1d:c5:7a:e2:8c:5e:88:19: 33:e0:87:fd:4c:53:59:aa:95:99:ba:64:7b:c0:32: 59:82:dd:60:a8:27:59:1f:45:ea:85:e2:5f:01:3c: 1a:38:92:46:78:6c:2d:94:3e:99:7d:71:84:10:77: 2b:e6:f5:25:85:0a:fe:82:58:02:06:77:ba:ab:e0: 2f:48:31:8c:d9:f1:4f:c5:88:4c:e2:c9:e5:36:54: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1C:57:A0:93:FF:77:64:DB:F3:F1:D3:47:6B:F8:0C:F6:EC:E5:62 X509v3 Authority Key Identifier: keyid:30:7A:44:15:BA:D4:0B:64:3E:10:BE:C4:D2:82:CD:30:72:BA:56:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ade669-cc5b-4edd-b971-6ae2846d8a51/1/MHpEFbrUC2Q-EL7E0oLNMHK6Vto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:43:8b:76:eb:d7:6b:73:f7:e5:96:d5:a0:8b:77:09:b5:3b: 4b:81:38:7d:99:1c:4a:e6:20:85:ee:8a:cb:16:64:93:fd:b4: db:45:87:cb:2c:05:3a:cd:22:4a:6c:e9:15:85:98:8e:03:fe: 6c:9f:02:8a:32:81:2e:30:af:3b:ac:3b:cf:f5:11:12:f8:66: b1:23:a9:6d:ad:0a:ea:60:e4:bc:74:43:23:d8:7e:da:92:69: d0:c9:e7:75:2b:be:68:ae:6a:9a:7d:fd:cc:ca:0a:bf:7a:28: 93:d6:72:6f:98:b3:07:0b:d9:00:29:d9:10:1e:c9:11:84:97: 73:e8:b9:e0:0e:a8:2f:d7:b0:59:95:74:f9:48:b1:31:2f:f9: 10:53:81:e1:a4:43:3c:75:19:d8:96:39:fd:2a:67:9f:0e:18: 35:f2:13:19:6e:de:a0:ad:9f:24:99:81:88:30:93:9f:0e:59: f4:cf:46:74:5e:05:8e:a6:ac:db:b8:00:7d:4a:79:59:06:0c: ab:c1:a2:13:43:e5:70:30:f9:a8:7e:df:be:5a:a8:e7:91:65: a3:28:51:d8:5b:4f:f4:b3:18:8a:69:da:0f:33:5c:7e:9a:d7: 38:b1:5d:80:4a:9c:8b:02:81:83:b6:49:7c:76:79:4b:2c:25: 5d:a9:85:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrTjJyImGHwFYFI1JGbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2E0NDE1YmFkNDBiNjQzZTEwYmVjNGQyODJjZDMwNzJi YTU2ZGEwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhhNDFjNTdhMDkzZmY3NzY0ZGJmM2YxZDM0NzZiZjgwY2Y2ZWNlNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTZTv5Ev0Cs6RcRzu3lZR6MxhYYS CCDxbz0G/j3QrurZAaZhCITjTJR+iBBiXTxrQ6TUlsbSzhsFtuEoTw6SjPjYOVu/ D+3sh9bisNaxmQR0AcHjRsAPVli/BxxhcT2qoDkW14V5bxG/IAmIiJertvqbDAkh gsZJ6luAdJJ61Q9X82fK8J4D3OaxU47Uhn1ZuL8v/f7yQUjfVkDtICgj82DMcigj T1ZbH/U9HcV64oxeiBkz4If9TFNZqpWZumR7wDJZgt1gqCdZH0XqheJfATwaOJJG eGwtlD6ZfXGEEHcr5vUlhQr+glgCBne6q+AvSDGM2fFPxYhM4snlNlRwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQcV6CT/3dk2/Px00dr+Az27OViMB8GA1UdIwQY MBaAFDB6RBW61AtkPhC+xNKCzTByulbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEt NmFlMjg0NmQ4YTUxLzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hZGU2NjktY2M1Yi00ZWRkLWI5NzEtNmFlMjg0NmQ4YTUx LzEvTUhwRUZiclVDMlEtRUw3RTBvTE5NSEs2VnRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEOLduvX a3P35ZbVoIt3CbU7S4E4fZkcSuYghe6KyxZkk/2020WHyywFOs0iSmzpFYWYjgP+ bJ8CijKBLjCvO6w7z/UREvhmsSOpba0K6mDkvHRDI9h+2pJp0MnndSu+aK5qmn39 zMoKv3ook9Zyb5izBwvZACnZEB7JEYSXc+i54A6oL9ewWZV0+UixMS/5EFOB4aRD PHUZ2JY5/Spnnw4YNfITGW7eoK2fJJmBiDCTnw5Z9M9GdF4Fjqas27gAfUp5WQYM q8GiE0PlcDD5qH7fvlqo55FloyhR2FtP9LMYimnaDzNcfprXOLFdgEqciwKBg7ZJ fHZ5SywlXamFQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:43 2025 by rpki-client